OneKey founder Yishi warns that iPhone 11 and earlier models contain two BootROM flaws that no software update can fix. The first, known as checkm8, affects models from the iPhone 4S through the iPhone X, while the second, usbliter8, targets devices including the iPhone XS, XR, 11 and second-generation SE. An attacker with even brief physical access could put the device into firmware update mode, connect a specialized USB tool and execute code before iOS starts, potentially without leaving detectable traces. According to Yishi, wallet seed phrases stored on the affected devices could be exposed, although the device passcode and Secure Enclave provide partial protection. He advises users to abandon existing seed phrases, create new ones on secure devices and transfer their assets, while also using strong alphanumeric passcodes, enabling Lockdown Mode and avoiding public USB ports.
Source: Read the original article
